CVE
CVE-2026-20147
Cisco · Cisco Identity Services Engine Software; Cisco · Cisco ISE Passive Identity Connector
- First Reported
- Apr 16, 2026
- Latest Reported
- Apr 20, 2026
CVE Enrichment
- CVSS
- 9.9 CRITICAL
- EPSS
- 10.38%
- EPSS Percentile
- 95.74%
- CISA KEV
- Not listed
Description
A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. In single-node ISE deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- [email protected]
- Published
- 16-Apr-2026 00:17
- Last Modified
- 27-Oct-2026 05:10
- EPSS Date
- 2026-11-05
- CWE
- CWE-77
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:L /
UI:N /
S:C /
C:H /
I:H /
A:H
CNA Products / Version Status
- Cisco · Cisco ISE Passive Identity Connector
Source: CNA · [email protected]
Default status: unknown
3.2.0 — affected
3.1.0 — affected
3.3.0 — affected
3.4.0 — affected
- Cisco · Cisco Identity Services Engine Software
Source: CNA · [email protected]
Default status: unknown
3.1.0 — affected
3.1.0 p1 — affected
3.1.0 p3 — affected
3.1.0 p2 — affected
3.2.0 — affected
3.1.0 p4 — affected
3.1.0 p5 — affected
3.2.0 p1 — affected
3.1.0 p6 — affected
3.2.0 p2 — affected
3.1.0 p7 — affected
3.3.0 — affected
3.2.0 p3 — affected
3.2.0 p4 — affected
3.1.0 p8 — affected
3.2.0 p5 — affected
3.2.0 p6 — affected
3.1.0 p9 — affected
3.3 Patch 2 — affected
3.3 Patch 1 — affected
3.3 Patch 3 — affected
3.4.0 — affected
3.2.0 p7 — affected
3.3 Patch 4 — affected
3.4 Patch 1 — affected
3.1.0 p10 — affected
3.3 Patch 5 — affected
3.3 Patch 6 — affected
3.4 Patch 2 — affected
3.3 Patch 7 — affected
3.4 Patch 3 — affected
3.5.0 — affected
3.4 Patch 4 — affected
3.3 Patch 8 — affected
3.2 Patch 8 — affected
3.5 Patch 1 — affected
3.3 Patch 9 — affected
3.2 Patch 9 — affected
3.4 Patch 5 — affected
3.5 Patch 2 — affected
Affected Products / Versions
- cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:*:*:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:-:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch10:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:-:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:-:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 3.1.0
cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch10:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.5.0
cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.5.0
cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.5.0
cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*
References
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (2)
- Critical ISE flaws (including CVE-2026-20147) can allow authenticated attackers to execute arbitrary commands and gain root access. Cisco Patches ISE and Webex Flaws That Could Enable RCE and User Impersonation
- Three critical Identity Services Engine flaws (CVE-2026-20147, CVE-2026-20180, CVE-2026-20186) could enable arbitrary OS command execution if attackers have administrative credentials. Cisco patches critical Webex SSO flaw and requires customers to upload a new SAML certificate
CVE (4)
Malware (1)
People (1)
MITRE ATT&CK (1)
Vendors (1)
Products (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.